SMBleed Vulnerability in SMBv3 Could Reveal Sensitive Data
NJCCIC Advisory
Original Release Date: 6/19/2020
Summary
A remote kernel memory disclosure vulnerability was discovered in SMBv3 that could be exploited to gain access to sensitive information. Security researchers believe a remote unauthenticated attacker could exploit the vulnerability, known as SMBleed, by sending specially crafted SMB message requests to access kernel memory locations on an affected system. The vulnerability impacts Windows versions 1903, 1909, and 2004, and Windows Server 2019 versions 1903, 1909, and 2004.
Recommendations
The NJCCIC advises updating systems as soon as possible after appropriate testing or applying workarounds provided in the Microsoft Advisory.
The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.
View our Privacy Policy here.
View our Site Index here.